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Think  server  consolidation  from  CDW  could  help? 
Or  are  you  okay  with  the  way  things  are  now? 


HP  ProLiant  BL460c  Blade  Server 


s3109" 


m 


s2491"  EST 

IBM  BladeCenter  HS21  Server 

•  4MB  2  ■  2MB  Level  2  Cache 

/VPC 

APC  Smart-UPS  2200VA 

EMC' 

EMC”  Celerra'  NS  Series/Integrated 

Call 

Call 

EMC 

We're  there  with  the  server  solutions  you  need. 

Is  managing  your  growing  number  of  servers  and  your  growing  storage  needs  getting  to  be 
too  much?  At  CDW,  we're  there  with  everything  you  need  to  optimize  your  servers.  From  server 
consolidation  to  storage  management,  networking  to  virtualization,  CDW  can  answer  your 
questions  and  get  you  the  solutions  you  need.  So  call  today.  It's  time  you  ran  your  network,  not 
the  other  way  around. 


CDW.COm  j  800.399.4CDW  The  Right  Technology.  Right  Away. 


14  Companies  Scramble  to 
Archive  E-mail.  As  e-mail 
becomes  part  of  official  business 
records,  companies  are  looking  to  in¬ 
stall  archiving  systems  to  make  sure 
documents  are  available  if  they're 
required  for  legal  purposes. 

■  OPINION 

4  Editor’s  Note:  Don  Tennant 

takes  a  timeout  fromtheday'snews 
to  write  a  revealing  profile  about 
himself.  The  big  revelation:  He's  a 
wisecracker. 

21  Brace  A.  Stewart  advises  IT 
organizations  to  line  up  allies  for  the 
key  projects  they'll  want  to  save  as 


44  Frankly  Speaking:  Frank 
Hayes  wants  you  to  consider  how 
many  risks  your  IT  people  and  users 

venienttodothingsacertairiway. 


22  The  Fixers 

COVER  STORY:  Three  turnaround  CIOs  talk  about  how 
they  get  troubled  IT  groups  back  on  track  fast  before 
riding  off  into  the  sunset. 

28  Boiling  the  IT  Frog 

Q4A:  In  his  new  book,  Harwell  Thrasher  tries  to  clarify  IT 

for  business  people  who  don't  understand  it -and  shows 
IT  folks  how  they  can  be  better  at  doing  the  same  thing. 

32  Social  Networking: 

Not  ITs  Problem 

When  your  company  starts  a  corporate  blog  or  wiki, 
make  sure  the  responsibility  for  policing  content  is 
outside  of  IT.  Hare's  how. 


18  The  Grill:  Lawson  CEO 

Harry  Debes  talks  about  ERP  on 
demand,  market  consolidation  and 
offering  pinot  noir  to  customers  tired 
of  SAP's  German  white. 

34  Security  Manager's 
Journal:  Proud  C.J.  Keeps  On 
Working.  C.J.  Kelly's  pride  makes 
her  want  to  do  it  all  herself.  But  she 
might  be  ready  and  able  to  bring  in 
some  consultants. 

40  Career  Watch:  An  engineer 
adjusts  to  working  closely  with  cus¬ 
tomers:  how  a  service  mentality  will 
help  you  survive  as  an  IT  pro;  and  what 
helps  people  make  job  transitions. 
42  Shark  Tank:  A  field  sales  rep 
complains  that  his  PC  is  infected 
by  viruses  and  spyware.  Could  it 
have  anything  to  do  with  the 
enormous  daily  e-mails  of 
pom  downloads  from  a 
former  co-worker? 
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Don  Tennant 

Timeout 

A  FEW  WEEKS  AGO,  when  I  interviewed  Hewlett- 
Packard  Executive  Vice  President  Ann  Livermore, 
I  asked  her  several  of  those  personal  dossier  ques¬ 
tions  that  we  include  as  a  sidebar  in  the  special 
Q&A  feature  we  call  “The  Grill.”  (I  had  to  ask  in  case  the  in¬ 
terview  made  the  cut  for  The  Grill.  It  didn’t.)  When  I  asked 
her  the  standard  “Last  book  you  read?”  question,  she  seemed 
uncertain.  She  eventually  threw  me  a  bone  and  divulged  that 
she  reads  every  Danielle  Steel  novel  she  can  get  her  hands  on. 


The  exchange  re¬ 
minded  me  of  a  column  I 
wrote  10  years  ago  when 
I  was  working  for  Com- 
puterworld  Hong  Kong 
and  of  the  fact  that  over 
the  years,  I’ve  received 
a  number  of  requests 
that  I  reprint  it  I  think 
the  number  is  two,  but  I 
lost  count  Here,  then,  by 
popular  demand  (a  phone 
call  from  a  person  who 
kept  calling  me  “Clarice,” 
and  a  fax  from  someone 
who  said  he  was  writing 
with  a  crayon  because 
he’s  not  allowed  to  have 
sharp  objects),  is  a  lightly 
edited  version  of  that 
1997  column: 

Hey,  what'sthis  that 
was  just  dropped  on  my 
desk?  Why.  it's  the  lat¬ 
est  edition  oflDGWorid 
Update."  the  International 
Data  Group  corporate 
newsletter!  I  love  this 
thing.  My  favorite  part 
is  the  back  page,  which 
is  normally  a  profile  of 


an  IDG  employee  some¬ 
where  in  the  world  who  is 
celebrating  his  10th  an¬ 
niversary  with  the  com¬ 
pany.  It’s  done  in  kind  of 
a  Dewar's  Profile  format, 
where  you're  supposed 
to  get  a  sense  of  who  the 
person  is  from  these  little 
snippets. 

Of  course,  I  always 
wonder  if  I'm  really  get¬ 
ting  an  accurate  picture 
of  the  profilee  this  way.  I 
mean,  if  somebody  asks 
you  to  name  the  last  book 
you  read,  and  you  know 
your  answer  is  going  to 
be  published,  are  you 
going  to  tell  the  troth  and 
say  it  was  Uncovering 
Victoria's  Secret,  or  lie  and 
say  it  was  LevNikolayev 

■  It's  a  trick  ques¬ 
tion.  Even  I  know 
that  inviting  dead 
people  to  a  dinner 
party  is  in  terribly 
poor  taste,  but  ID 
play  along. 


ich  Tolstoy:  The  Man  and 
the  Myth  ( or  whatever 
happens  to  be  the  most 
intelligent-sounding  book 
you've  ever  heard  of)? 
Please. 

Let’s  see...  how  would 
I  respond  if  it  were  my 
10th  anniversary? 

Why  did  you  join 
100?  They're  the  only 
ones  who  believed  me 
when  I  said  I  couldn't 
divulge  my  work  experi¬ 
ence  because  it  was 


to  a  dinner  party: 

(It's  a  trick  question. 
Even  I  know  that  inviting 
dead  people  to  a  dinner 
party  is  in  terribly  poor 
taste,  but  I'll  play  along.) 
Mark  Twain.  Socrates. 
Mahatma  Gandhi,  Moth¬ 
er  Teresa  and  Albert 
Einstein. 

Who  am  I  kidding? 
OK.tobehonest.it 
would  probably  be 
Shania  Twain,  Mel  B 
"Scary"  Spice,  Michelle 


Yeoh,  the  captain  of  the 
Malibu  Beach  Girts’  Vol¬ 
leyball  Team  and  Albert 
Einstein. 

(I've  thought  this 
through -I'd  have  Ein¬ 
stein  there  to  sit  next  to 
me  because  compared  to 
him.  I’m  a  real  hunk.) 

The  last  book  you 
read:  The  Giant  Jam 
Sandwich,  by  John 
Vernon  Lord  (for  the 
1,247th  time -I  have  a 
6-year-old). 

Interests  outside 
of  the  office:  Avoid¬ 
ing  eye  contact:  asking 
questions  when  I  already 
know  the  answer:  trying 
to  read  to  myself  without 
moving  my  lips;  making 
deer  and  giraffe  sounds: 
saying  "What?' to  a  per¬ 
son  over  and  over  again 
to  see  how  many  times 
he  will  repeat  himself  be¬ 
fore  walking  away  in  dis¬ 
gust  (the  record  so  far  is 
six -can  you  imagine?). 

Words  to  live  by: 
"Keep  everyone’s  ex¬ 
pectations  of  you  very 
low.  That  way,  if  you  ever 
accomplish  anything 
even  marginally  above 
average,  they'll  be  really 


Incidentally,  that  6-year- 
old,  Shelly,  turned  16 
today,  and  she’s  getting 
her  driver’s  license.  You 
enjoy  this  week’s  issue. 
I’ll  go  panic.  ■ 

Don  Tennant  is  editor  in 
chief  of  Computerworld. 
Contact  him  at  don_ 
tennant@computerworld. 


■  LETTERS 


The  Mac’s  Real  Cost 
Advantage:  Durability 

As  a  recent  convert  to  the  Mac,  On¬ 
line  Editorial  Director  Scot  Finnie 
has  overlooked  a  significant  factor: 
durability  [“Mac  vs.  PC  Cost  Analy¬ 
sis:  How  Does  It  All  Add  Up?”  Com- 
puterworld.com,  June  8]. 

I’m  typing  this  on  a  Mac  G3  pur¬ 
chased  in  1997.  I’m  still  using  OS 


thousands  I  saved  by  paying  a  liti 
more  for  a  Mac. 

■  George  D.  Ziemann,  Tempe,  Ariz 


Microsoft’s  Scheme 

In  the  article  “Linux  Camp  Di¬ 
vided  on  Microsoft  Deals"  [News, 
June  2SJ,  known  Linux  detractor 


The  $400  to  $500 1  could  have 
saved  at  purchase  for  a  Windows 
machine  is  a  small  fraction  of  the 


paign  against  the  perceived  thre: 
to  its  business  from  Linux. 

■  Robert  Halloran,  Jacksonville,  FI 
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How  to  Make  Windows  XP 
Last  for  the  Next  Seven  Years 


-  and  yes,  even  getting  some  of  Vista's  secu¬ 
rity  and  interface  improvements  in  XP. 
www.com|iuterworM.coni/software 


Dumpster  Diving  for  E-data 


Revving  a  Database 
Without  Spending  a  Fortune 

Database  administrators  reveal  tips  and 
tricks  for  choosing  the  best  took;  it's 


Green  IT:  Marketing  Ploy 
Or  New  Technology? 

Critics  of  “green  IT  say  that  vendors  know 
they  can  make  money  by  playing  up  their 
products'  feel-good  appeal  to  the  market. 
But  some  users  say  that  if  a  technology 
doesn't  haveanROI.it  isn't  realty  “green.” 


The  Future  of 
Network  Access  Control 


How  to  Back  Up 
Your  Cell  Phone 
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News, 


THE  WEEK  AHEAD 

MONDAY:  Networkers  at  Cisco  Live,  a  conference  for  Cisco  us¬ 
ers.  will  begin  in  Anaheim,  Calif.,  continuing  through  Thursday. 
MONDAY:  The  O'Reilly  Open  Source  Convention  will  start  in 
Portland,  Ore.,  with  two  days  of  tutorials,  followed  by  a  con¬ 
ference  program  that  begins  on  Wednesday. 

TUESDAY:  Linda  Cureton,  CIO  at  NASA's  Goddard  Space 
Flight  Center,  will  speak  at  a  breakfast  event  being  held  in 
McLean.  Va.,  by  market  research  firm  input. 


Feds  Seek  S3.3M  in 
Fines  on  Lab  Breach 


THE  U.S.  DEPARTMENT  of 

Energy  has  proposed  fines 
totaling  $3.3  million  against 
the  current  and  former  op¬ 
erators  of  the  Los  Alamos 
National  Laboratory,  saying 
they  failed  to  protect  classi¬ 
fied  data  that  was  compro¬ 
mised  in  a  security  breach 
discovered  last  October. 

The  DOE  notified  the 
University  of  California  on 

July  13  that  it  intends  to  fine 

the  university  $3  million, 
which  would  be  the  largest 
civil  penalty  ever  assessed 
by  the  agency.  It  also  is 
proposing  a  $300,000  fine 
against  Los  Alamos  Na¬ 


tional  Security  LLC  (LANS), 
a  company  that  is  jointly 
owned  by  the  university, 
government  services  pro¬ 
vider  Bechtel  National  Inc. 
and  two  other  firms. 

In  addition,  Secretary  of 
Energy  Samuel  Bodman  or¬ 
dered  LANS  to  take  specific 
actions  to  bolster  physi¬ 
cal  and  IT  security  at  the 
Los  Alamos  lab  (pictured 
above).  Not  doing  so  could 
result  in  additional  civil 
penalties  of  up  to  $100,000 
per  day  for  each  violation, 
Bodman  said. 

The  enforcement  actions 
follow  months  of  investi¬ 


gation  into  the  breach,  in 
which  a  contract  worker  at 
Los  Alamos  illegally  down¬ 
loaded  classified  nuclear 
data  onto  three  USB  thumb 
drives  that  were  found  in  a 
trailer  owned  by  the  worker. 

The  University  of  Califor¬ 
nia  and  LANS  have  30  days 
to  submit  written  responses. 
The  university  managed 
and  operated  the  Los 
Alamos  lab,  located  in  New 
Mexico,  through  May  of  last 
year.  LANS  took  over  man¬ 
agement  on  June  1, 2006. 

Chris  Harrington,  a 
spokesman  for  the  univer¬ 
sity,  said  via  e-mail  that  its 
response  “will  be  informed 
by  the  fact  that  the  incident 
at  issue  occurred  in  October 
2006  —  after  the  universi¬ 
ty’s  management  contract 

Harrington  said  the  uni¬ 
versity  will  also  outline 
actions  it  took  to  strengthen 
security  processes  at  the  lab 
prior  to  the  management 
changeover.  Among  them 
were  the  implementation 
of  DOE-approved  security 
training  programs  and  the 
expansion  of  the  lab's  disk¬ 
less  and  medialess  comput¬ 
ing  environment. 

The  lab  said  that  officials 
there  are  taking  steps  to  ad¬ 
dress  the  problems  cited  by 
the  DOE.  For  example,  on 
July  10,  Los  Alamos  certified 
what  it  described  as  a  new 
“super  vault-type  room”  for 
storing  classified  data. 

—  Jaikumar  Vijayan 


MOBILE  *  WIRELESS 

Dual-Mode 
BlackBerry 
Debuts 

Research  In  Motion  Ltd.  last 
week  announced  the  first 
dual-mode  BlackBerry  de¬ 
vice,  which  can  provide  voice 
and  data  services  over  both 
cellular  and  Wi-Fi  networks. 

Scheduled  to  become 
available  in  the  U.S.  through 
AT4T  Inc.  this  summer,  the 
BlackBerry  8820  includes 
a  full  QWERTY 
keyboard,  a 
320-by-240- 
pixel  display,  a 
trackball  navi¬ 
gation  system 
and  built-in 
GPS  support. 

Pricing  wasn't 
announced. 

The  new  de¬ 
vice  switches 

between  cel¬ 
lular  networks  I 
and  Wi-Fi  net- 
works  based  on  the 
802.11a/b/g  standards, 

RIM  said.  J 

Gartner  Inc.  analyst  Ken  I 

Dulaney  said  that  “when 
RIM  does  something,  it 
usually  works  well."  But, 
he  added,  it's  unclear  how 
many  BlackBerry  users  will 
start  using  Wi-Fi  networks  I 

for  voice  calls  to  bypass 
their  cellular  carriers. 

-  MATT  HAMBLEN 
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You  strive  to  exceed  your 
client's  expectations.  Start  by  choosing 
the  Network  that  exceeds  yours. 


Verizon  Wireless,  America's  most  reliable  wireless  broadband  network, 

works  with  you  and  your  existing  systems  to  help  you  give  your  clients  expert  service. 


Visit  verizonwireless.com/business  or  call  1.800.VZW.4  BIZ 


veri  On  wireless 


MANAGEMENT 

Claims  of  Fk 
AtfTlLGroui 

THE  QUESTION  of  whether 
someone  compromised  an 
onSne  election  held  last  fall  by 
the  IT  Service  Management 
Forum's  U.S.  chapter  remains 
an  unsolved  mystery.  Even  the 
source  of  the  complaints  that 
the  voting  was  rigged  can't  be 

But  the  plot  continues  to 
thicken.  Last  week,  Compuf- 
tnmrid  received  an  e-mail 

iwed  Voting 
Still  Murky 

containing  a  spreadsheet  pur¬ 
portedly  showing  detailed  data 
on  the  October  election,  which 
filled  five  seats  on  the  ITSMF 
USA's  board  of  directors. 

Only  a  handful  of  people  are 
supposed  to  have  access  to 
that  information,  and  the  fact 
that  it  has  leaked  out  explains 
in  part  why  the  Pasadena. 

CaiH. -based  IT  standards 
group  has  hired  risk  consulting 

firm  Kroll  Inc.  to  investigate 
the  matter. 

“Their  directive  was  to  hnd 
the  truth,"  said  Sallie  Kennedy, 
who  heads  the  ITSMF  USA 

tee.  “H's  realty  starting  to  feel 
weird,  to  be  quite  frank.’ 

The  ITSMF  USA  is  part  of  an 

international  organization  that 
promotes  the  adoption  of  ser¬ 
vice  management  standards, 
such  as  the  IT  Infrastructure 

Library,  or  IT1L  Leah  Palmer, 
the  U.S.  chapter's  president, 
sent  an  e-mail  to  members  in 
late  May  to  alert  them  about  the 

yet  to  hnd  any  significant  com¬ 
promise  of  the  voting,  although 
it  has  identified  a  couple  of 
people  listed  as  voters  who  said 
that  they  didn't  actually  vote  in 
the  board  election. 

-  PATRICK  THIBODEAU 
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■  MOBILE  &  WIRELESS 


m  m  m  ■  ^  ■■  dress  the  problem,  (ones  said. 

I  IHHfAKOlTlf  liraninn  “They  are  not  really  supportive  of 

IIW7I  I%1  this  technology,  for  obvious  revenue 

__  _  _  _  «  reasons,”  he  said.  “Anytime  a  cell 

Dual-Mode  Phones  szsss 

BWBWm^W  ■  BBWBBWW  gest  challenges  with  this  technology.” 

_  ,  AAA  Cellular  network  operators  are  t 

Hopes  to  spread  system  to  30,000  users  ing  and  developing  their  own  dual 

1  5»rvrvr»  D..  H-a*  UAmklni<  mode  systems,  in  which  they  prov 

by  2000.  By  Matt  namDICn  fiS"  m  software  to  smoothly  link  a  phone 


to  spread  system  to  30,0' 

9.  By  Matt  Hamblen  » 


■  STORAGE 


Companies  Scramble 
To  Archive  E-mail 


Legal  and  regulatory  requirements  force  auy  no  electronic  documents  or  e-maii 

costly  projects.  By  Brian  Fonseca 


Regulatory  and  legal  issue 
are  forcing  IT  managers  to 
create  costly  e-mail  storage 
and  archival  systems  as  elec 
tronic  documents  replace 
paper  as  official  business  records. 

Users  and  analysts  note  that  courts 
and  regulators  are  increasingly  push¬ 
ing  companies  to  produce  stored 
e-mail  documents  on  demand  or  face 
penalties. 

For  example,  allegations  that  Intel 
Corp.  failed  to  properly  archive  poten¬ 
tially  critical  e-mail  messages  —  some 
written  by  its  top  executives  —  could 


“You  find  corporate  officials  making 
admissions  in  e-mail  that  you  would 
not  find  anywhere  else,  and  a  lot  of  the 
time,  they  forget  they  made  those  ad¬ 
missions,”  remarked  Terrell. 

Brian  Babineau,  an  analyst  at  Mil¬ 
ford,  Mass.-based  Enterprise  Strategy 
Group,  said  that  his  firm's  research  has 
found  that  three  out  of  four  organiza- 


On  the  Mark 

HOT  TRENDS  ■  NEW  PRODUCT  NEWS  ■  INDUSTRY  BUZZ  BY  MARK  HALL 


Print  Chips  Just  Like  Memos 

KLAUS  SCHROETER  envisions  a  popular,  low-cost,  fool¬ 
proof,  biometrically  protected  future  for  all  IT  systems.  It’s 
easy,  he  says,  once  you  start  producing  application-specific 
“organic  semiconductors”  on  ink-jet  printers,  which  is,  of 
course,  his  plan.  The  CEO  of  Nanoldent  Technologies  AG  in 
Linz,  Austria,  describes  a  world  where  biometric  processors  made  with 
highly  conductive  conjugated  polymers  are  mixed  with  nanoparticles 
and  then  cranked  out  on  ink-jet  system.”  Watch  your  nearby  printer 

printers  like  memos  from  the  boss.  for  organic  semiconductors  lying 

With  such  a  simple  production  proc-  around  the  paper  tray  by  early  2009, 
ess,  it  will  be  cheap  to  slap  a  biomet-  predicts  Schroeter. 

ric  sensor  on  everything  IT,  he  con- 

Upgrade  Is  No  Game 

I  phone’s  plastic  case,  Migrating  a  supercomputer  system 
I  or  even  transpar-  to  new  high-performance  computing 
I  ently  on  a  device’s  (HPC)  management  software  isn't  an 
I  display.  According  easy  process.  It's  harder  still  when 
I  to  Schroeter,  Nano-  your  plan  is  to  make  the  change 
I  Ident’s  processors,  without  disrupting  your  200,000 


responsible  for  the  overall  archi¬ 
tecture  and  performance  of  EVE,  a 
multiuser,  interactive  online  game 
that  takes  place  in  a  virtual  universe 
with  5,000  active  solar  systems.  In 
the  real  universe,  the  Python  code 
primarily  used  to  develop  EVE  rims 
on  hundreds  of  IBM  LS20  blade 
servers  using  Windows  Server  2003. 
For  years,  Fannar  has  depended  on 
homegrown  HPC  | — 


the  famous  annual  Top500  list  of  su¬ 
percomputers,  where  he  hopes  it  will 
remain  “for  a  long  time.” 

Online  Storage  Forever 

-  Even  for  iPhones 

Speaking  of  a  long  time,  it’s  hard  to 
beat  eternity.  That’s  how  long  Forever- 
safe  SAS  in  Troyes,  France,  says  it 
will  store  unlimited  files  and  data 
of  any  type,  even  if  you  drop  the 
$59-per-year  service.  The  company, 
which  launched  its  Unlimited  Safe 
online  storage  service  in  the  U.S.  this 

—  month,  already 

•  has  55,000  users 
in  Europe  storing 
500TB  online,  says 
CEO  Emmanuel 
Chriqui.  He  thinks 
iPhone  users  will 
flock  to  it  —  once 
.JI’JZLh  the  service  is 

StaSSS  ready  for  them 

that  lasts  forever.  later  this  year.  Al- 

! —  —  though  the  service 

works  fine  with  Macs  and  the  Safari 
browser  now,  Foreversafe  still  has  to 
tweak  it  to  handle  Safari  on  iPhones. 


We  just  spent  almost  $90  million 
researching  solutions  to 
tomorrow's  server  problems 

WNfehpwKiwp-ei 

"Detemrinin!  total  Cost  of 
Ownership  for  Data  Center  and 
NetwmV  Room  Infrastructure" 

M20*fREE 

WfcPw«H6w-i8i 
The  Seven  types  of 
Power  Problems' 

WkitB  Papw«120  iwpizoi 
'Guidelines  for  Specification 
of  Data  Center  Power  Quality' 

*KO"ffi£E 

Why  not  spend  a  few  minutes  with  us? 

We  talked  to  thousands  of  customers 
from  Baltimore  to  Beijing  and  saw  the 
good,  the  bad,  and  the  ugly  measures 
customers  took  in  their  data  center 
planning.  In  many  cases,  turnover  and 
budget  cuts  resulted  in  no  plan  at  all. 

Do  you  and  your  staff  know  the  top  ten 
planning  mistakes  to  avoid?  The  easiest  way 
to  improve  cooling  without  spending  a  dime? 


our  latest  selection  of  white  papers. 

Take  advantage  of  our  valuable  research 
today  and  save  yourself  money  and 
headaches  tomorrow. 


APC 


Time  well  Pape,s 

Visit  www.apc.com/promo  and  enter  key  code  w55Bx  •  Call  888-289-APCC  x4552  •  Fax  481-788-2797 
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Harry  Debes 

The  CEO  of  Lawson  talks  about 

ERP  on  demand,  market  consolidation 
and  playing  the  role  of  the  anti-SAP. 


We  Neva  lot  about  Salesforce.cc 


model.  Now  SAP  is  getting  into  this 
market  with  its  recently  announced  A1S 
hosted  offering.  What's  your  opinion  of 
this  trend?  It’s  an  interesting  phenom¬ 
enon.  One  organization  with  a  flam¬ 
boyant  CEO  has  seen  some  success 
in  this  market.  Salesforce.com  [sales 
force  automation]  is  the  simplest  type 
of  application.  Some  applications  lend 
themselves  well  to  that  model,  but  I’m 
not  sure  the  marketplace  wants  an 
SaaS  model  for  all  software  delivery. 
We’re  not  getting  that  feedback  from 
our  clients.  I’m  not  aware  of  classic 
manufacturers  who  want  that  model 
for  financials  or  other  ERP  software.  If 
it  were  so,  everyone  would  have  gone 
there  already,  because  the  customer 
demand  would  be  there. 

Continued  on  page  20 


dhun  term,  you  have  one  vendor,  but 
you  can’t  immediately  get  to  one  inte¬ 
grated  solution.  You  still  have  a  series 
of  disparate  products.  It's  three  to  six 
years  before  you  can  properly  integrate 
or  replace  the  applications,  and  that 
effort  for  clients  is  costly  and  a  painful 
experience.  They  look  at  alternatives, 
and  it’s  not  automatic  that  they'll  just 
migrate  to  the  next  version  of  Oracle. 

H  the  industry  centmus  to  eomaifate 
to  on*  major  ptayw,  which  ot  the  top  ERP 
mMon  would  you  prefer -or  hut  prefer 
-  to  ooo polo  QQikirt?  It  doesn’t  matter 
to  me  if  there  is  only  one  survivor.  We 
compete  against  them  today,  and  I’m 
not  afraid  of  any  of  them. 

I’m  not  trying  to  minimize  that. 
They’re  very  large  and  successful  busi¬ 
nesses.  But  the  good  news  is  that  the 
customers  want  choice,  not  just  one 
flavor. 

Right  now,  there  are  a  lot  of  media 
representatives  and  analysts  telling 


aantMiraphAmMiMpaU 
ihm  having  oodtipfedhparato  ipptea-  _ 

As  technology  advances  and  we  ap¬ 
proach  a  service-oriented  architecture, 
the  interface  between  Lawson  and 
other  solutions  becomes  increasingly 

a  risk  for  our  clients.  We’re  offering  the 
top-ranked  technology  playing  in  the 
market  [IBM  WebSphere  middleware]. 
We’re  not  having  any  pushback  from 
customers.  They  can  pick  Siebel  for 
CRM  or  Salesforce.com  and  interface 
to  it.  It  won’t  be  a  challenge  to  do  so. 

ing?  We've  made  a  lot  of  good  progress 
with  our  financial  results.  Most  people 
forget  Intentia  was  distressed  when 
we  bought  it.  It  wasn’t  a  bad  fit,  but  it 
needed  turnaround  work. 


M  The  customer 
doesn’t  want 
just  one 

flavor  of  red  or  white 
-  they  want  the  pinot 
and  the  zinfandel,  too. 
The  customer  wants 
a  choice. 


like?"  The  customer  doesn’t  want  just 
one  flavor  of  red  or  white  —  they  want 
the  pinot  and  the  zinfandel,  too.  The 
customer  wants  a  choice. 

Some  SAP  and  Oracle  accounts  ac¬ 
quired  Lawson  for  some  of  their  divi¬ 
sions  simply  because  they  don’t  want 
the  incumbent  vendor  to  dictate  the 
future  terms  of  business  to  them  and 
for  them  to  have  all  their  apples  in  one 
basket.  They  want  to  keep  their  pri¬ 
mary  vendor  honest 

When  a  customer  asks  the  question, 
“How  do  you  feel  competing  against 
larger  organizations  in  my  space?”  I 
ask,  “Do  you  have  competitors  any 
bigger  than  you?”  How  does  any  hard¬ 
ware  or  grocery  store  compete  against 
Wal-Mart?  It's  not  as  customer-friendly, 
and  some  people  refuse  to  go  to  Wal- 
Mart  That’s  nothing  against  Wal-Mart 
But  some  people  prefer  to  buy  their 
jeans  in  a  boutique  shop  or  want  more 


known  far  havtag  CEOs  with  big  ogre 
-such  as  Larry  Bhan.  Are  those  days 
gam?  Larry  Ellison  is  fun  to  watch 
and  not  to  take  too  seriously.  It’s  smart. 
He  does  things  to  get  attention  and 
get  a  reaction  from  the  media,  as  does 
Marc  Benioff  [CEO  of  Salesforce.com]. 

I  think  there  will  always  be  room  for 
people  that  are  flamboyant  and  have 
something  to  say.  It’s  not  accidentaL 
But  it’s  not  a  prerequisite.  Sam  Palmi- 
sano  at  IBM  and  Mark  Hurd  at  HP 
and  SAP’s  Henning  Kagermann  aren't 
known  as  having  big  egos. 

And  your  styfe?  rtn  in  the  middle.  I’m  not 
as  flamboyant  or  outspoken  —  or  quite 
as  conservative  as  the  other  guys.  I  think 
it’s  my  management  style  to  collaborate. 
1  don’t  ever  want  it  to  be  all  about  me. 


Bruce  A.  Stewart 

Essential  To-dos 


CUTBACKS  in  IT  spending  are  becoming  more 
common  as  2007  moves  on.  Perhaps  you  have  not 
yet  been  affected.  But  enough  of  you  have  been  that 
vendors  reporting  their  quarterly  results  are  guid¬ 
ing  expectations  downward  and  showing  deteriorating  reve¬ 
nues,  rising  costs  and  growing  inventories.  The  moment 
someone  asks  the  deadly  question,  “What  are  others  spending 
on  IT?”  you,  too,  will  probably  see  retrenchment. 


Before  that  question  is 


year.  If  you  want  to  be  able 
to  execute  these  key  to-do 
items,  you  need  to  line  up 
your  allies  now  so  that  you 
can  protect  them  through 
any  cuts  you  may  face. 

These  are  the  sorts  of 
projects  my  clients  are 
working  on: 


eration  are  going  to  find 
themselves  severely  short 
of  talent  when  the  baby 


and  leading  thinkers  on 
Enterprise  2.0  are  in  agree¬ 
ment  that  a  workplace 
without  open  communica¬ 
tion  will  fail  to  hold  the 
generation  bom  after  1978. 
you  need  to  use  things 
like  wikis,  blogs,  instant 


thing  like  Facebook)  and 


Yes,  you  need  more  than 
these  tools,  but  these  are 
expected  by  the  millenni- 
als.  Fortunately,  benefits 
will  flow  quickly  once 
you’re  over  the  hurdle  of 


casts.  We  all  can  find  lots 
of  “cleanup"  activities  with 
the  potential  for  a  good  re¬ 
turn  on  investment. 

If  you  don't  believe  that’s 
true,  just  spend  a  few  days 
doing  fieldwork  in  your 
users’  offices.  You  might 
find  that  some  of  them  de¬ 
pend  on  tools  that  require 


regular  influx  of 
contractors  to  keep  them 
going.  Or  maybe  you’ll  see 
how  unproductive  work¬ 


ers  are  when  they  have  to 
use  spreadsheet  bridges 
or  rekey  information  from 
one  application  to  another, 
so  you'll  decide  to  build 
a  new  component  inside 
your  ERP  framework  to 
eliminate  that  sort  of 
grunt  work. 

This  kind  of  activity 
shows  that  you  are  serious 
about  intelligently  manag¬ 
ing  your  costs  and  will 
help  you  gain  support  from 
mcedepa. 

warts  raUnr  than  port 
saMmt.  Every  group  in 
your  company  wants  to 
get  something  from  IT,  s< 
they  pressure  you  for  point 
solutions.  But  proliferating 
point  solutions  just  add  to 
IT  complexity  and  cost. 

When  money  is  tight, 
you  need  to  consider  the 
big  picture  and  what  will 
position  you  for  a  better 
cost  profile  in  the  future. 
Ask  yourself  what  really 
needs  refurbishing  and 
whether  the  technology  is 
something  the  company 
is  going  to  need  for  years 


merit  could  be  something 
like  upgrading  to  a  newer 
version  of  your  ERP  suite. 

Uwmhetf-  If  you  haven’t 

virtualized  your  server 
farm,  cleaned  up  your  data 
stores  and  moved  to  dens¬ 
er  packaging,  these  are  all 
good  activities  to  cham¬ 
pion  in  a  company  that’s 
hunkering  down.  And  it 
will  be  easier  to  make  your 
case  if  you  can  bundle 

licensing  into  the  capital 


going  to  feel  the  real  pres¬ 
sure  in  the  next  few  years, 
so  trading  several  years  of 
operating  costs  for  capital 
today  is  a  sound  proposal. 

ft’s  important  to  note 
that  my  clients  don’t  be¬ 
lieve  this  is  a  short-term 
problem.  They’re  paying 
attention  to  the  falling 
exchange  rate  and  worry¬ 
ing  about  the  costs  of  parts 
and  products  produced 
overseas.  They  don’t  think 
“normal-  is  coming  back 
—  and  neither  should  you. 

Think  like  your  CFO, 
and  you  can  thrive,  even  in 


of  Vancouver,  British 


the  technology-enabled 
enterprise.  He  can  be 
reached  at  brucestevtarttg) 
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THE  COMPANY  has  al¬ 
ready  gone  through  two 
CIOs  this  year,  and  it’s 
only  April  1.  During  the 
job  interview,  the  CEO 


Knecht  is  one  of  a  particular  breed 
of  CIO  who  moves  from  one  difficult 
situation  to  the  next,  often  jumping 
from  industry  to  industry,  and  usu¬ 
ally  staying  in  a  job  only  two  to  three 


financial  officer  may  be  a  big  part 
of  the  problem.  Or  it  could  be  that 
the  CEO  isn’t  spending  enough  time 
talking  with  senior  business  manag¬ 
ers  about  IT  projects  to  understand 


ThtRmrs 


These  turnaround  CIOs  get  ailing  IT  departments 
on  track  fast  and  then  move  on.  By  David  Raths 


■ 


■  COVER  STORY 


ing  IT  departments  in  the  financial 
services  industry.  At  Houston-based 
Bank  United  —  “a  bunch  of  failed  Tex¬ 
as  thrifts  that  were  merged  together" 
—  his  biggest  challenge  was  to  develop 
an  e-commerce  strategy.  Sadin  says  he 
had  one  year  to  complement  the  bank’s 
traditional  delivery  channels  with 
Internet,  e-mail  and  call  centers  to  im- 


BUILD  DISCIPLINE;  SHIFT  PHtORfTlES 

WHEN  he  joined  Blue  Cross  Blue  Shield 
of  Wisconsin  in  2000,  Knecht  had  to 
deal  with  a  chargeback  system  that 
was  broken  and  an  IT  group  that  was 
$8.6  million  over  budget  and  didn’t 
deliver  projects  on  time.  “No  one  had 
respect  or  confidence  in  IT,"  he  recalls. 

Knecht  implemented  an  IT  project/ 
resource-tracking  system  that  fed  the 
chargebacks  into  a  PeopleSoft  financial 


though  he  may  have  a  very  short-term 
focus,  it  is  still  important  to  build  rela¬ 
tionships  with  other  leaders.  “The  key  is 
to  understand  what  they’re  thinking,”  he 
says.  “If  you  don’t  know  why  they’re  do¬ 
ing  what  they’re  doing,  you  will  always 
be  playing  catch-up." 

Jones  adds  that  listening  for  conflicts 

oritizing  activities  at  the  beginning  of  a 
turnaround.  “Often  after  a  merger,  you 
have  a  lot  of  finger-pointing  and  an  ‘us  vs. 
them'  mentality,"  he  says.  “It’s  critical  to 


technical  consequences  and  which  aren't 
Some  things  can  be  allowed  to  fester, 
while  others  have  to  be  resolved." 

Turnaround  CIOs  also  have  to  be  able 
to  shoot  down  unrealistic  proposals. 
Sadin  recalls  an  experience  at  booming 
subprime  mortgage  lender  Aegis  Mort¬ 
gage  Corp.  “We  were  growing  so  fast, 
they  asked  if  we  could  spend  $10  million 
and  add  100  more  people  right  away.  I 
had  to  tell  them  we  couldn’t  absorb  that 
kind  of  growth  right  away  without  get¬ 
ting  dysfunctional." 


ing  about  successors  very  early  in  their 
tenures.  Jones  says  that  sometimes  a 
CEO  will  tell  him  that  he  has  a  few  re¬ 
ally  good  people  in  IT  and  that  if  it  were 
a  stable  situation,  he  would  promote  one 
of  them  to  CIO.  “That  is  nirvana  for  a 
turnaround  CIO,"  he  says,  “because  you 
can  probably  trust  their  opinion  and  you 
can  start  grooming  [the  candidate]  to 
ultimately  take  on  that  role.”  ■ 

Raths  is  a  freelance  writer  based  in 
Philadelphia.  Contact  him  at  draths@ 
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TECH 


This  is  Tech  Dispenser.  Unlike  bot-powered  blog  networks,  we  have  actual 
human  beings  picking  and  choosing  which  IT  blogs  are  the  most  interesting. 
Every  piece  of  content  that  appears  on  Techdispenser.com  is  selected  by 
Computerworld  editors  and  categorized  for  easy  access.  With  over  80  IT 
blogs  in  our  growing  network,  we’ve  created  a  one-stop  shop  so  you  can  see 
what  the  top  bloggers  on  the  Web  are  saying  each  week. 

www.techdispenser.com 
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Harwell  Thrasher  is  an  author, 
speaker  and  coach  specializing 
in  the  human  side  of  IT.  His 
Web  site  is  MakingITclear.com. 
He  talked  with  Kathleen  Mely- 
muka  about  his  new  book,  Boil¬ 
ing  the  IT  Frog,  which  aims  to 
clarify  IT  for  business  people 
who  really  don’t  understand 
it,  and  to  help  IT  professionals 
who  understand  it  completely 
but  don’t  know  quite  how  to 
explain  it. 


Magic 
and  IT 
have  a  lot  in 
common. 


i  the  human  side  of  IT.  His 
Web  site  is  MakingITclear.com. 
He  talked  with  Kathleen  Mely- 
muka  about  his  new  book.  Boil¬ 
ing  the  IT  Frog,  which  aims  to 
clarify  IT  for  business  people 
who  really  don’t  understand 
it,  and  to  help  IT  professionals 
who  understand  it  completely 
but  don't  know  quite  how  to 
explain  it 


nk't  title  mean?  Accord¬ 
ing  to  a  myth,  if  you  put  a  frog  in  boiling 
water,  it  will  hop  out,  but  if  you  put  it  in 
a  pot  of  water  at  room  temperature  and 
gradually  heat  up  the  water,  the  frog 
will  become  accustomed  to  the  increas¬ 
ing  temperature  and  stay  in  the  pot 
until  it's  cooked.  Change  agents  use  this 
myth  to  describe  how  organizations  get 
into  situations  that  they  would  never 
tolerate  if  they  knew  the  final  result  in 
advance.  That’s  what  has  happened  in 
IT.  Business  people  would  never  toler¬ 
ate  the  current  state  of  IT  if  they  could 
see  where  they  were  headed,  but  they 
got  used  to  things  gradually. 


thing.  What  is  magkki  IT.  and  why  isn't  H 
good?  This  idea  came  from  an  Arthur 
C.  Clarke  quote,  “Any  sufficiently  ad¬ 
vanced  technology  is  indistinguishable 
from  magic.”  Magic  and  IT  have  a  lot 
in  common.  Magic  has  strange  words: 
abracadabra,  hocus-pocus.  We  in  IT 
have  SQL,  ERP,  SOAP.  Magic  has  this 
inherent  idea  that  you  see  things  that 
happen  and  you  don’t  quite  understand 
why  but  you  know  they  do,  so  you 
suspend  logical  thinking.  Business 
people  tend  to  regard  IT  as  something 
magical,  and  so  they  don't  apply  their 
own  logical  thinking.  This  suspension 
of  logic  is  why  business  has  so  much 
trouble  with  IT.  It  creates  unrealistic 
expectations. 

There’s  also  the  concept  of  the  wiz¬ 
ard  in  magic:  people  who  can  do  magi¬ 
cal  things.  In  business  organizations, 
there  are  wizards  —  users  who  have 
gotten  good  at  an  application.  And  in 
IT  organizations,  there  are  wizards 
too.  The  wizards  want  to  keep  systems 


Q&A  ■ 


the  way  they  are  to  maintain  their  wiz¬ 
ard  status.  As  a  result,  you  get  stuck 
with  a  system  that  doesn’t  get  better. 

Vou  say  that  without  trust,  IT  is  useless. 
Why?  And  how  do  you  establish  trust? 

Business  people  will  never  have  the 
detailed  understanding  of  technology 
that  IT  people  have.  But  the  busi¬ 
ness  people  need  to  feel  that  the  right 
technology  decisions  are  being  made. 
That's  where  the  trust  comes  in.  With¬ 
out  trust,  business  people  keep  second- 
guessing  everything  the  IT  organiza¬ 
tion  does,  and  IT  can’t  be  successful 
You  establish  trust  by  agreeing  on 
common  objectives  and  goals  and  hav¬ 
ing  consistency  in  how  you  commu¬ 
nicate  with  each  other.  Both  sides  do 
what  they  say,  and  say  what  they  do. 

Why  is  using  return  on  investment  for  proj¬ 
ect  selection  a  tick*  to  faBure?  Most  peo¬ 
ple  would  agree  that  the  right  projects 
are  those  that  are  in  the  best  interest  of 
the  company  and  make  the  most  stra¬ 
tegic  sense.  But  there  are  two  fallacies 
in  using  ROI  to  choose  your  projects. 
Fust  is  that  the  project  with  the  highest 
ROI  is  best  for  the  business.  That's  not 
necessarily  so.  For  example,  a  high-ROI 
project  may  make  a  process  more  ef¬ 
ficient  by  making  it  more  rigid,  when 
what  you  really  need  is  for  it  to  be  more 
flexible.  The  second  fallacy  is  that  you 
can  compare  the  ROI  of  project  propos¬ 
als.  Those  who  write  proposals  tend  to 
overstate  return,  understate  expenses, 
minimize  transition  costs  and  depen¬ 
dencies  on  other  projects,  and  neglect 
risk.  So  the  project  with  the  highest  ROI 
on  paper  tends  to  be  the  one  with  the 
most  creative  proposal  writer. 

Why  do  most  projects  fail?  In  my  experi- 


Where  IT  Goes  Wrong 


■  T  PEOPLE  are  vary  focused  on 

■  the  how.  not  on  the  whaL  The 

■  most  common  mistakes  they’ll 

■  make  are  errors  caused  by  doing 

■  the  wrong  things,  not  by  doing 

TaM  IT  people  what  you  want  to 
do,  and  you  can  almost  see  the 
gears  turning  hi  their  heads  as  they 


Some  of  the  worst  difficulties  in 
communicating  with  an  IT  orga¬ 
nization  are  caused  by  differing 

For  example,  IT  people  frequently 
use  the  word  project  to  mean  the 


your  goals.  IT  people  are  so  focused 
on  the  how,  in  fact,  that  the  most 
common  mistakes  they’ll  make 
are  errors  caused  by  doing  the 
wrong  things  -  not  by  doing  things 
wrong.  That’s  why  an  IT  strategy 
is  so  important  to  a  business;  it's 
the  only  way  to  be  sura  that  your  IT 
organization  is  headed  in  the  right 


testing,  documentation,  training, 
implementation  and  infrastructure 
additions.  Thus  the  completion 
date  for  a  project  may  be  viewed 
by  IT  as  the  completion  of  the 
software  work.  If  you  don't  clarify 
the  deliverable,  then  there  will  be  a 
huge  misunderstanding. 


depth  knowisdoe  II  the  third  i 

ofThSi  Boiling  the  IT  Froe  I 

specialty  that  6  II  <*■*»* 


Both  groups  have 
to  struggle  to  kaep 
up  with  changing 


them.  If  you  go  around  asking  all  the 

about  adding  people,  and  adding  more 

stakeholders  what  they  want  and  your 

people  requires  more  coordination. 

project  goal  is  the  sum  of  all  those 

You  have  to  rearrange  the  tasks  being 

re 

things,  you  will  undoubtedly  have 

done  and  break  them  up  in  different 

contradictions  —  for  example,  a  simple 

ways.  Reallocation  of  resources  takes 

system  that  must  do  everything.  Sixth. 

resources  in  itself.  Also,  you  would 

ay 

there’s  not  enough  contingency  plan¬ 

probably  have  assigned  the  best  people 

ning.  You’ve  got  to  anticipate  things 

to  begin  with,  and  now  you're  adding 

that  can  go  wrong  and  take  them  into 

people  who  may  not  be  the  best,  so  you 
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■  PREMIER  100  CLOSE-UP 


PREMIER  100  CLOSE-UP  ■ 


and  staffers  on  data  security  were  key 
to  the  project’s  success,  she  says. 

Here’s  a  look  at  Temple's  ID  conver¬ 
sion  plan. 

STEP  1:  SET  POLICY 

The  project’s  steering  committee  first 
had  to  nail  down  policies  on  the  proper 
use  of  Social  Security  numbers.  Al¬ 
though  the  committee  was  led  by  IT,  the 
majority  of  its  members  were  heads  of 
the  departments  that  would  be  most  af¬ 
fected  by  the  change,  Dolhansky  notes. 

“At  the  time,  there  was  a  lot  in  the 
media  about  identity  theft,  so  nj/one 
was  resistant,”  says  Nancy  Hinchcliff, 
Temple’s  assistant  vice  president  of  hu¬ 
man  resources  payroll  management. 

The  committee  determined  which 
departments  could  or  couldn't  ask  for 
Social  Security  numbers  and  developed 
a  process  for  handling  the  numbers 
in  cases  where  they  would  still  be  re¬ 
quired,  such  as  for  student  financial  aid, 
employee  benefits  and  tax  purposes. 

"Departments  had  to  come  forward 
and  explain  whether  they  needed  to 
collect  and  store  Social  Security  num¬ 
bers  —  and  explain  why,”  Dolhansky 
says.  “We  had  to  make  sure  that  infor¬ 
mation  was  being  handled  consistently 
universitywide.” 

Gartner  Inc.  analyst  Avivah  Litan 
says  Temple  took  the  right  approach  in 
switching  to  the  new  TUid  numbers 
rather  than  just  encrypting  Social  Se¬ 
curity  numbers.  “If  you  just  encrypt, 
you  still  have  to  have  access  control,” 
she  explains,  adding  that  encryption 
can  also  create  performance  problems. 

Brian  Forman,  director  of  application 
systems  at  Temple  and  the  TUid  project 
manager,  says  those  issues  were  partly 
behind  the  university’s  decision  to  insti¬ 
tute  the  new  ID  numbers.  But  the  main 


in  numbers”  —  included  Temple’s  new 
data  protection  policies,  FAQs  for  stu¬ 
dents  and  employees,  a  conversion  prep¬ 
aration  checklist,  encryption  guidelines 
and  a  distribution  schedule  for  the  new 
ID  cards.  As  an  extra  measure,  IT  rep¬ 
resentatives  met  with  all  departments  to 
make  sure  staffers  were  on  board. 

“There  was  a  lot  of  community  out¬ 
reach,"  Dolhansky  says. 

STEP  3:  BREAK  IT  DOWN 

A  large  project  team,  broken  down  into 
half  a  dozen  or  so  groups,  tackled  the 
systems  work. 

A  forms  team  identified  where 
Social  Security  numbers  were  being 
collected.  It  worked  closely  with  the 
steering  committee  on  crafting  usage 
policies.  A  process  group  reviewed  all 
interfaces  to  determine  if  they  con¬ 
tained  fields  for  Social  Security  num¬ 
bers.  And  the  conversion  team  was 
responsible  for  converting  Temple's 
legacy  records,  dating  back  to  1963  for 
students  and  1983  for  employees. 

Another  group  was  in  charge  of 
reissuing  ID  cards  to  students  and 
employees  of  the  university  and  health 
system  —  a  total  of  some  45,000. 

Says  Dolhansky,  “The  difficult  part 
was  cleaning  up  the  ancillary  systems 
and  making  sure  departments  got  rid 
of  spreadsheets  and  databases  that 
contained  Social  Security  numbers." 

To  do  the  conversions,  departments 
uploaded  their  files  to  a  secure  Web 
site  where  Social  Security  numbers 
were  matched  and  TUids  were  added 
as  another  field  to  the  files.  When  the 
conversion  files  were  complete,  the 
departments  received  e-mail  notifica¬ 
tions.  They  then  went  back  to  the  site 
to  retrieve  the  conversion  files  and 
used  them  to  update  their  systems. 


house  IT  team,  consumed  about  15,000 
man-hours.  But  with  the  threat  of  fraud 
and  identity  theft  increasing,  “everyone 
knew  we  had  to  do  this,”  Dolhansky 
says.  According  to  javelin  Strategy  & 
Research's  2007  fraud  survey,  8.4  mil¬ 
lion  U.S.  adults  fell  victim  to  identity 
theft  in  the  past  year,  with  one-year 
losses  from  fraud  totaling  $49.3  billion. 

STEP  4:  FLIP  THE  SWITCH 

The  IT  team  shut  down  Temple’s 
systems  during  the  July  Fourth  week¬ 
end  in  2005  and,  with  fireworks  going 
off  overhead,  began  the  process  of 
deactivating  all  of  the  old  ID  numbers 
and  migrating  to  the  TUids. 

“In  order  to  guarantee  mission- 
critical  systems  were  running  proper¬ 
ly,  we  worked  for  48  hours  straight  and 
tested  everything,"  Dolhansky  says. 
“Nurses,  for  example,  needed  to  enter 
maternity  wards.  AH  of  those  systems 
had  to  have  minimal  downtime." 

At  the  same  time,  the  team  had  to 
monitor  university  sites  overseas, 
which,  she  notes,  were  not  shut  down  for 
the  U.S.  holiday.  “We  kept  our  fingers 
crossed,"  Dolhansky  says.  “We  didn’t 
know  if  we  had  heard  from  everyone.” 

But  aside  from  lightning  blowing  out 
a  parking  lot  card  reader,  the  conver¬ 
sion  went  off  smoothly.  Without  inci¬ 
dent,  students  and  employees  began 
using  their  new  IDs  —  which  also  serve 
as  debit  cards  —  to  buy  meals,  enter 
buildings,  park  their  cars,  check  out 
library  materials  and  purchase  goods. 

Although  it  must  have  been  “a  mas¬ 
sive  undertaking,”  says  Eugene  Kwat- 
ny,  professor  of  computer  and  informa¬ 
tion  sciences  at  Temple,  the  transition 
was  “almost  transparent"  for  members 
of  the  university  community. 

“All  of  Temple’s  suborganizations 


STEP  2:  GET  THE  WORD  OUT 

To  raise  awareness  about  data  security 
and  the  ID  conversion  process,  a  com¬ 


■  WEB  2.0 


malicious  behavior  and  e\ 
vulnerable  to  lawsuits. 

“Organizations  have  to 
manage  the  technology  or 
it  will  come  back  to  hurt 
them,"  Happe  warns. 


—  _  |  urtlllftBOTIIA.  malicious  behavior  and  even  baugus  union  ooes  a  twice- 

OOUIAL  Nt  I  WUlf  IVINU:  vulnerable  to  lawsuits.  a-year  seminar  for  students, 

"Organizations  have  to  faculty  and  staff  on  the 

A  I  manage  the  technology  or  benefits  and  limitations  of 

■  H  it  will  come  back  to  hurt  technology,  including  so- 

IHI  II  ■  H  them,”  Happe  warns.  networking  tools.  “We 

■  ■■  ■  ■  ■  explain  copyright  laws  and 

H  W  B  H  Hi  PLAN  AHEAD  other  restrictions,”  he  says. 

■  H  Many  companies  implement  IT  can  help  curb  bad  be- 

social  networking  technol-  havior  by  employing  autho- 
W  ITm  |  ogy  without  much  planning, 

■  I  II  HPBI  ■  ■  says  Klein.  “Someone  says.  controls  to  render  social 

flm  ■  P  J  'Hey.  let's  do  a  wiki.’ Then  networks  private.  "Private 

something  goes  wrong,  and  means 'members  only,’ so 

TT  Qhm  i  ldn’t  nlav  the  role  of  they  **»■• We  should  have  y°u  can  contro1  membership 

I  1  M 1UU1UI 1  l  Uldy  LUC  1 U1CU1  thought  about  that,’ "  he  says,  upfront  as  weU  as  moderate 

blog  police.  By  Sandra  Gittlen  Klein  spent  several  months  content  before  it  is  posted,” 

®  *  planning  all  aspects  of  the  Bianchini  says. 

- IM  KLEIN  and  his  IT  |  Web  site  and  the  content  You  can  also  delete  any- 

team  recently  rolled  management  system,  which  thing  inappropriate,  ensur- 

out  social  network-  are  the  backbone  of  the  ing  a  level  of  privacy  and 

'-  •wls,  including  school  district’s  social  net-  control  that  isn’t  possible  on 


But  Klein,  who  is  director 
of  information  services  and 
technology,  didn’t  want  IT  to 
become  the  blog  police.  To 
avoid  that,  he  put  controls  in 
place  so  that  both  IT  and  the 
school  district  are  protected 
from  users  running  amok. 

“The  way  we  handle  it  is 
that  if  a  business  unit  wants 
to  start  blogging,  then  a 
leader  has  to  manage  those 
blogs,"  he  says. 

For  instance,  if  a  teacher 
wants  his  students  to  com¬ 
municate  via  the  school’s 
Web  site,  then  that  teacher 
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M  IT  does  not 
^  ^get  put  in  the 

JIM  KLEIN.  DIRECTOR  OF 
INFORMATION  SERVICES  AND 
TECHNOLOGY.  SAUGUS  UNION 
SCHOOL  DISTRICT 


flows  from  the  user  to  the  behave,”  Happe  says.  And  if 
Web.  Klein’s  system,  which  is  users  don’t  behave,  you  can 
Web-based,  open-source  and  take  away  their  privileges.  ■ 
homegrown,  alerts  the  com-  Oittkn  is  a  freelance  technolo- 
munity  leader  when  there  is  gy  editor  near  Boston.  Contact 
content  for  him  to  approve.  her  at  sgittien@charter.net. 


also  help  police  the  site. 
The  system  enables  them 
flag  things  they  deem  inaj 
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tifying  community  leaders 
and  IT.  “It  comes  to  the  top 
quickly,  and  we  can  go  in 
and  manage  it,”  Klein  says. 

Another  key  element  is 
that  leaders  and  users  must 
be  clear  about  community 


EMERSON.  CONSIDER  IT  SOLVED. 


■  SECURITY  MANAGER’S  JOURNAL  C.J.  KELLY 


Trouble 

Ticket 


Proud  CJ.  Keeps 
On  Working 

Our  security  manager’s  pride  makes  her 
want  to  do  it  all  herself.  But  consultants 
could  be  the  answer  this  time  around. 


ITS  BEEN  like 
Christmas  this 
year  in  the  secu¬ 
rity  lab.  We  were 
able  to  purchase  all 
the  technologies  we  had 
planned  on. 

That's  unusual,  be¬ 
cause  IT  and  security 
equipment  is  expensive, 
making  our  budget  one  of 
the  largest  in  the  agency. 
We  don’t  always  get  the 
things  we  want,  and 
sometimes  we  can’t  even 
get  the  things  we  think 
we  need. 

Even  better,  though, 
we  just  closed  the  fiscal 
year  with  excess  funds 
that  had  to  be  spent,  and 
I  was  given  first  dibs.  I 
took  advantage  of  the 
opportunity  by  purchas¬ 
ing  equipment  that  was 
not  budgeted  until  fiscal 
2008. 

That  means  I  have  ex¬ 
tra  money  in  the  current 
budget,  which  presents 
an  intriguing  dilemma 
regarding  the  limits  of 
my  staff  and  my  own 

In  my  previous  jobs, 
the  types  of  projects 


that  are  under  way  right 
now  at  the  agency  were 
staffed  with  several  secu¬ 
rity  engineers.  But  here. 
I’m  it. 

Now,  that’s  something 
I  don’t  really  mind.  In 
fact,  I’ve  written  before 
about  my  belief  that  it’s 
beneficial  for  techni¬ 
cal  managers  to  work 
alongside  their  staffs 
on  critical  projects  —  a 
belief  that’s  strongly  op¬ 
posed  by  virtually  all 
management  gurus  and 
supported  by  about  half 
of  the  readers  who  have 
taken  the  time  to  write  to 
me  on  this  topic. 

It  has  been  my  expe¬ 
rience  that  technical 
people  want  technical 
managers  who  under- 

■  I  have  extra 
money  in  the 
current  budget, 
which  presents 
an  intriguing  di¬ 
lemma  regaining 
the  limits  of  my 
staff  and  my 
own  time. 


stand  what  they  are  talk¬ 
ing  about  and  can  offer 
assistance  from  time  to 
time. 

Then  there’s  the  feet 
that  I  don’t  have  anyone 
on  staff  with  the  level  of 
expertise  necessary  to 
successfully  complete 
these  projects.  I  am 
grooming  two  senior 
people  to  take  over  once 
these  projects  go  into  the 
maintenance  phase,  but  I 
have  to  wonder  what  will 
happen  in  the  interim. 

It  would  be  a  huge  re¬ 
lief  if  I  could  use  some  of 
that  extra  money  in  the 
budget  to  hire  consul¬ 
tants.  The  only  obstacle 
might  be  my  own  pride. 

ME.  ME.  ME 

I  want  to  be  able  to  say, 
“Look  at  what  I  didr  Like 
a  lot  of  people  who  work 
in  IT,  I  take  a  lot  of  pride 
in  what  I  accomplish  pro¬ 
fessionally,  and  it’s  hum¬ 
bling  to  say  I  just  can’t  do 
it  all. 

But  when  I’m  not  blind¬ 
ed  by  my  pride,  I  can  see 
that  it’s  impossible  to  do 
everything  I’d  like  to.  I 


AT  ISSUE:  With  re¬ 
sources  stretched 
thin,  too  much  work 
lands  on  the  security 
manager's  plate. 
ACTION  PLAN:  Some 
extra  money  in  the 
budget  makes  using 
consultants  a  real 
possibility. 


took  a  swipe  at  planning 
the  projects  through  the 
next  year.  It’s  all  doable 
—  if  I  and  the  rest  of  the 
staff  don’t  take  any  vaca¬ 
tions  or  have  any  family 
emergencies  for  the  next 
12  months.  But  we  live  in 
the  real  world,  of  course, 
and  we  all  have  real 
families  and  real  obliga¬ 
tions  to  them,  and  so  the 
schedule  needs  a  dose  of 
reality. 

At  this  juncture,  I 
could  rewrite  the  master 
project  plan  to  take  us 
out  over  two  years  in¬ 
stead  of  one  and  still  do 
all  of  the  work  myself. 

Or  I  can  figure  out  how 
to  bring  in  some  consult¬ 
ing  services  for  my  most 
complicated  security 


When  pride 
comes  up 
against  that 
kind  of  time- 
frame  reality,  I 

it  takes  a  fell.  - 

I’m  going  to  see  whether 
we  can  really  manage  to 
contract  with  some  con¬ 
sultants.  ■ 

This  week’s  journal  is 
written  by  a  real  security 
manager,  “CJ.  Kelly," 
whose  name  and  employer 
have  been  disguised  for 
obvious  reasons.  Contact 
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Microsoft 


beating  back  pirates. 
v  easy. 


beating  back  spyware, 
easier. 


2.  Walking  the  plank. 

Pirates  are  big  on  getting  their  victims  to  walk  the  proverbial  plank 
Use  this  against  them.  Pose  as  a  plank  salesman;  pitch  a  new,  better 
plank.  Ask  them  to  "test  the  plank"  and,  once  they're  out  on  it 
reveal  the  truth.  The  humiliation  might  just  get  them  to  leave. 


3.  Pay  them  off. 


to  bury  it  somewhere,  secretly, 
vill  lose  whatever  interest  they 
n  you  in  the  first  place. 


1.  Implement  Microsoft  Forefront. 

Forefront  "  makes  defending  your  systems  easier.  It's  a 
simple-to-use,  integrated  family  of  client,  server,  and 
edge  security  products  (such  as  Forefront  Client  Security) 
that  helps  you  stay  ahead  of  your  security  threats  more 

all  the  latest  moves,  visit  easyeasier.com 


4.  Use  your  skills  of  Beard-Fu. 
Beard-Fu  is  the  ancient  art  of  facial  hair 

yank  a  sideburn— if  done  properly,  it's 

yfr  hard  nowadays,  but  there's 

probably  f 


5.  Beat  them,  then  join  them.  ;  ’ 

Life  as  a  high-seas  scalawag  might  '■  J 


T 
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Bart  Perkins 

The  Broken 
Process  Dilemma 

FIXING  a  broken  process  is  often  difficult,  expensive 
and  thankless.  IT  executives  are  divided  on  whether 
to  outsource  a  broken  process  (e.g.,  payroll,  help  desk, 
accounting)  or  fix  it  in-house  first.  Some  feel  that 
outsourcers  specialize  in  specific  processes  and  therefore  pre¬ 
fer  to  let  the  outsourcer  fix  what’s  broken.  Others  claim  that 
after  a  broken  process  is  outsourced,  it  often  remains  broken. 

This  view  advocates  fixing  |  subpar  performers  can  be  i  outsourcing: 


This  view  advocates  fix 
processes  before  outsoii 
ing.  There  are  good  arg 
ments  on  both  sides. 

Here's  why  you  shoul 


er  fix  your  than  you  can.  Contracts 


Savings.  Streamlined 
recesses  usually  cost  les 
>  operate  than  broken 
nes,  and  whoever  fixes 
te  process  reaps  the  sav- 


frequently  offer  outsourc-  ings.  One  Fortune  500 


■a.  Good  out-  ers  incentives  for  speed 
strive  to  make  and  effectiveness,  and 
>  as  efficient  and  these  bonuses  are  often 
as  possible.  They  collected.  (Even  if  repai 


incentives  for  speed  company  outsourced 

effectiveness,  and  its  financial  systems, 

se  bonuses  are  often  which  had  been  costing  it 

ected.  (Even  if  repair-  $10  million  annually.  The 
the  broken  process  is  outsourcer  streamlined 

specified  in  the  con-  the  process  and  reduced 
:t,  most  outsourcers  costs  to  $4  million  per 
their  standardized  pro-  year.  Since  the  contract 


own  staff  to  fix  a  process 
protects  you  from  losing 
the  resources  your  project 
requires  to  higher-priority 


sourcer  is,  it’s  often  unfa¬ 
miliar  with  your  corporate 
culture  and  the  day-to-day 
workings  of  your  company. 
This  knowledge  —  or  the 
lack  of  it  —  significantly 
affects  the  design  and 
adoption  of  new  processes. 

Companies  sometimes 
feel  forced  to  outsource 
broken  processes  because 
they  lack  staffers  with 
process  expertise.  One 
effective  alternative  is 
to  hire  an  outside  firm 
(specializing  in  process 
redesign)  to  fix  the  process 
before  it  is  given  to  your 
outsourcer.  Such  firms  are 
not  inexpensive,  but  their 


not  part  of  your  organi¬ 
zational  hierarchy  and  is 
minimally  affected  by  your 
corporate  politics.  This 
allows  the  outsourcer  to 
make  unbiased  decisions 
regarding  your  processes. 


But  there  are  reasons  covering  the  new  process 
to  fix  your  process  before  and  appropriate  metrics. 

This  often  leads  to  misun 


■  In  most  cases, 
outsourcers  can  fa 
broken  processes 
more  quickly  than 
you  can. 


Outsourcers  serve  many 
clients  and  have  their  own 
priorities.  Understand¬ 
ably,  larger  accounts  get 


Bart  Perkins  is  managing 
partner  at  Louisville,  Ky.- 
based  Leverage  Partners 
Inc.,  which  helps  organiza¬ 
tions  invest  well  in  IT.  Con¬ 
tact  him  at  BartPerkins@ 


re  attention.  Using  your  I  LeveragePartners.co 


lULY; 


You've  got  an  eyewitness. 

Is  it  a  network,  application,  or  security  problem?  Find  out  instantly  with  the 
Network  Instruments*  GigaStor™  appliance.  No  other  analysis  device  can  quickly 
isolate  the  issue  to  provide  valuable  retrospective  analysis  and  security  forensics. 
Every  transaction  is  recorded,  making  it  easy  to  go  back  in  time  to  determine  not 
only  when  the  anomaly  took  place,  but  why. 

Resolve  intermittent  problems,  track  compliance,  isolate  VoIP  quality 
issues,  identify  zero-day  attacks  and  more  on  WAN,  Gigabit  and  10  GbE 
networks.  Reduce  network  complexity  with  the  GigaStor.  Because  when  it 
comes  to  your  network,  everything  is  a  suspect. 


I  GigaStor:  Get  proof.  Take  action.  Move  forward. 


Learn  more  about  GigaStor.  800-566-0919 

www.Networklnstruments.com/lineup 


Anywhere.  Anytime. 

Can't  get  enough  of  Computerworld? 

No  matter  where  you  are,  Computerworld  is  there. 

Keep  up  with  the  latest  technology  news  on  your  PDA. 

www.computerworld.com 


IT|careers 


ate 


Service: 

Survival 


incraadngly  see  good  service 
as  (Mr  key  to  longevity. 

So  try  applying  th«  to  your 
own  organization.  Whon 
dents  approach  you  with  a 
request,  do  you  tel  them  H's 
not  your  area,  or  do  you  look 
up  the  name  of  the  person 
who  can  best  help  them? 
When  you're  planning  an  up¬ 
grade,  do  you  schedule  Hat 
a  time  that's  convenient  for 
your  dents,  or  a  time  that's 
convenient  for  you?  When  a 


doyDubegfnadalogueto 
fnd  out  how  you  can  help? 

AaMRteaaanricenientai- 
Ry  has  te  be  cuNfwtad,  with 


■  DEVELOP  A  *WE"  MIND¬ 
SET.  Both  internal  IT  and 
buakiess  dents  have  a  vest¬ 
ed  interest  in  doing  the  best 
job  for  the  company.  There's 


ComptaMngb^Nal^'busi-  !  tod The m^hsskitudol 
naes  person's  only  form  of  !  the  Future,  due  out  in  the  fat 


to  get  it  right. 

B  MAKE  EVERY  IHTERAC 
TION  COUNT.  Clients  form 

encounter  the  IT  group, 
whether  they're  upgndhg 
alaptopordekingonthe 
self-help  Web  site.  Each  one 


proach  to  servica  is  not 

is  to  convey  a  willingness 
to  serve,  not  to  be  an 

■  MSMCERE.  Don't  be  Ilka 
the  store  checkout  dark  who 

found  everything  OK. 


,  guished  engineer  is 
involved  in  an  effort  to  pro¬ 
mote  closer  teamwork  with 
customers  in  the  early  stages 
of  product  development. 


face  to  face.  It  brings  on  a  whole 
new  set  of  challenges,  but  I  see  this 
as  stimulating  in  that  my  learning 
curve  remains  very,  very  steep. 

What  have  you  learned  by 
working  closely  with  custom¬ 
ers?  The  most  valuable  thing  I've 
learned  is  how  to  effectively  engage 
clients  in  collaborative  innovation.  It 
is  very  educational  and  rewarding  to 
help  clients  transform  their  products 
to  produce  dramatically  improved 
business  results  On  a  personal 
level,  the  most  fulfilling  aspect  is  to 
think  that,  in  a  small  way.  I  may  have 
helped  save  lives  through  technolo¬ 
gy  innovation  such  as  the  work  IBM 
is  doing  for  the  medical  industry. 


How  did  you  accommodate 
the  shift  in  focus?  I  had  to  listen 
better  so  I  could  figure  out  quickly 
what  was  being  discussed  and 
where  it  might  be  going.  Moving  from 
an  internal,  product-centric  environ¬ 
ment  to  an  external,  services-centric 
environment  was  a  big  transforma¬ 
tion.  To  build  trust  with  a  client,  you 
need  a  solid  set  of  interpersonal 
skills  such  as  good  communication 
and  a  willingness  to  admit  when 
you  aren't  able  to  do  something.  I 
don't  know  how  anyone  trains  for 
this,  except  by  trial  and  error. 


Working  Blindly 


Better  self-awareness 


COMPUTERWORLD  JULY: 


m-  1  ii 

Journey  to 
the  storage  frontier 


Storage  Networking  World.  Dallas. 

Attend  the  leading  conference  for  IT  managers, 
storage  architects  and  infrastructure  professionals. 

October  1  5-1 8,  2007  •  Gaylord  Texan  •  Dallas,  Texas 

See  See 

Frank  Abagnale  V.  James  Onalfo 

I  f  : 


For  complete  details,  or  to  register.^  0ctober  15.18 

Dallas.  Texas 


www.snwusa.com 


I  FRANKLY  SPEAKING 


Frank  Hayes 

ACuRureof 

Convenience 

,  OOGLE  IS  getting  rid  of  its  2038  cookies.  That’s 

(the  year  2038,  when  Web  browser  cookies  created 
by  its  Web  sites  over  the  past  decade  were  set  to  ex- 
h  pire.  From  now  on,  Google’s  cookies  will  only  last 
for  two  years  from  the  date  of  your  last  visit  to  a  Google  site. 

Does  that  really  change  much  for  Google  users?  No.  But  it 
should  be  a  warning  flag  for  corporate  IT. 

Consider  this;  Why  |  preferences  as  one  that  |  people  and  users  taking 
did  Google  cookies  last  lasts  for  decades.  In  fact,  because  those  risks  are 
until  2038?  Because  that  since  users  are  likely  to  convenient? 


did  Google  cookies  last 
until  2038?  Because  that 
was  the  latest  they  could 
expire.  (The  technical 
explanation:  A  cookie  dati 
is  actually  the  number  of 
seconds  since  Jan.  1, 1970, 
stored  as  a  signed  32-bit 
integer  with  a  maximum 


ployee  laptop  or  lost  CD. 
By  then,  it  will  be  too  late. 

But  before  then,  chang¬ 
ing  that  culture  of  conve¬ 
nience  will  be  miserably 
difficult. 

No  one  will  want  to 
change  —  not  your  over¬ 
worked  IT  staff,  and  least 
of  all  your  busy  users. 
Between  bad  habits,  long¬ 
standing  traditions  and 
simple  inertia,  you’ll  have 
your  work  cut  out  for  you. 

You'll  have  to  get  your 
Web  developers  and  busi¬ 
ness  analysts  to  stop  cap¬ 
turing  information  they 


explanation,  of  course. 
“We  set  the  expiration  far 
into  the  future  —  in  2038, 
to  be  exact  —  because  the 
primary  purpose  of  the 
cookie  was  to  preserve 
preferences,  not  to  let 
them  be  forgotten,”  wrote 
Google  privacy  guru  Peter 
Fleischer  in  a  blog  entry 
last  week  announcing  the 
new  policy. 

Well,  sure.  But  in  practi¬ 
cal  terms,  a  cookie  that 
expires  after  two  years  is 
just  as  good  at  preserving 


what's  reasonable  —  and  a 
little  more  secure. 

Hold  that  thought.  Now 
ask  yourself  this:  How 
many  risks  are  your  IT 

■  Like  Google,  you 
have  a  culture  of 
convenience  when 
it  comes  to  han¬ 
dling  data.  Unlike 
Google,  you  have 
no  one  complain¬ 
ing  about  it. 


,  it  11  be  a  long,  slow 
cause  securing  it  is  hard?  process.  And  no,  it’s  not 

Chances  are,  you  don’t  an  emergency  —  yet.  You 
know.  If  it’s  happening,  it’s  don’t  want  it  to  become 

probably  all  going  on  un-  one.  So  heed  the  warning, 
der  your  radar.  Get  started  on  eliminatin) 

Like  Google,  you  have  that  insecure  culture  of 
a  culture  of  convenience  convenience  now. 

when  it  comes  to  handling  After  all,  getting  rid  of 
data.  Unlike  Google,  you  2038  cookies  only  took 
have  no  one  complaining  Google  10  years.  ■ 
about  it.  Frank  Hayes  is  Computer- 

At  least  not  until  those  world’s  senior  news  col- 
Social  Security  numbers  umnist.  Contact  him  at 
or  other  pieces  of  sensitive  frank_hayes@ 
data  end  up  on  a  stolen  em-  computerworld.com. 


one.  So  heed  the  warning. 
Get  started  on  eliminating 
that  insecure  culture  of 


Solaris™  is  open  source  and  free. 

It  runs  on  IBM,  HP  (and  Sun,  too.) 

With  Solaris;  you  can  do  a  lot  more.  Add  reliability  and  data  integrity  to 
your  databases.  Confidently  deploy  a  secure,  scalable  Web  infrastructure. 
Plus,  you  can  run  Solaris  on  over  880  x86  Platforms  and  still  benefit  from 
Sun’s  24/7  world-class  support. 

Learn  more,  download  or  get  your  free  DVD  today  at  sun.com/getsolaris. 

And  join  the  Solaris  open  source  project  at  opensolaris.org. 

soiaris  ^ Sufi 


Innovations  by  InterSystems 


Make 

Applications 

More 

Valuable 


relational  databases.  And  with  InterSystems’  Unified  Data  Architecture”  tech-  /**  A  TIJ I 
nology,  Cache  eliminates  the  need  for  object-relational  mapping.  Which  means  I  A  Ifl 1 
Cachd  doesn’t  just  speed  up  the  perfinmance  of  applications,  it  also  accelerates 
their  development.  Cache  is  available  for  Unix,  Linux,  Windows,  Mac  OS  X,  and  OpcnVMS 
and  it  also  supports  MultiValue  development.  Cachi  is  deployed  in  more  than  100,001 
systems  ranging  from  two  to  over  50,000  users.  Embed  our  innovations,  enrich  your  application: 


i  CD,  at  InterSystems.com/Cache22A 


